Hardware Secure Boot. A Review Of "IRIS: An Embedded Secure Boot for IoT devices" [Póster]

This study proposes IRIS a hardware secure boot solution, that is suitable for integrating IoT devices. IRIS can boot a Linux kernel image pre-stored in removable media and comprises a data verifier securing the authenticity, integrity, and confidentiality of the boot process. IRIS is fully developed as a hardware module and the results reveal short boot-up times and a small hardware footprint when implemented on FPGA chips. In addition, IRIS is an open-source generic solution that can be adapted to multiple architectures and includes a crypto-core called E-LUKS that can be used outside the boot-loading process to add confidentiality, integrity, and authenticity to data stored on off-chip storage like a flash device. IRIS shows a reduction in lookup tables footprint when compared to other IoT boot solutions consuming from 2 times to 8 times less resources and only slightly greater, around 30%, with solutions that only cover authentication and integrity.